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Abstract 

In  this  paper,  we  investigate  some  algebraic  and  combinatorial 
properties  of  a  special  Boolean  function  on  n  variables,  defined  us¬ 
ing  weighted  sums  in  the  residue  ring  modulo  the  least  prime  p  >  n. 
We  also  give  further  evidence  to  a  question  raised  by  Shparlinski  re¬ 
garding  this  function,  by  computing  accurately  the  Boolean  sensitivity, 
thus  settling  the  question  for  prime  number  values  p  =  n.  Finally,  we 
propose  a  generalization  of  these  functions,  which  we  call  laced  func¬ 
tions ,  and  compute  the  weight  of  one  such,  for  every  value  of  n. 


Mathematics  Subject  Classification:  06E30,11B65,11D45,11D72 
Key  Words:  Boolean  functions;  Hamming  weight;  Subset  sum  problems;  residues 
modulo  primes. 
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1  Introduction 


Being  interested  in  read-once  branching  programs,  Savicky  and  Zak  [7]  were 
led  to  the  definition  and  investigation,  from  a  complexity  point  of  view, 
of  a  special  Boolean  function  based  on  weighted  sums  in  the  residue  ring 
modulo  a  prime  p.  Later  on,  a  modification  of  the  same  function  was  used 
by  Sauerhoff  [6]  to  show  that  quantum  read-once  branching  programs  are 
exponentially  more  powerful  than  classical  read-once  branching  programs. 
Shparlinski  [8]  used  exponential  sums  methods  to  find  bounds  on  the  Fourier 
coefficients,  and  he  posed  several  open  questions,  which  are  the  motivation 
of  this  work. 

Let  n  be  a  positive  integer  and  p  the  smallest  prime  with  p  >  n.  Let 
Yn  :=  .  Given  a  vector  x  =  (aq, . . . ,  xn )  £  Yn,  we  define  wt(x.)  =  Y^i=i  xi 

to  be  the  Hamming  weight  of  x,  and  we  let 

n 

s+(x)  =  E  kxk  (modp),  1  <  s_|_(x)  <  p,  (1) 

k=l 


and  define  the  x\ -laced  Boolean  function  (or  simply,  laced  function)  Ln  +  on 
Yn  by 


^n,+  (x) 


^+(x)  if  1  <  a+(x)  <  n; 
x±  otherwise. 


(2) 


Note:  this  Ln,+  function  is  the  function  fn  of  [7]  and  /  of  [8]. 
We  remark  that  we  can  alternatively  define  a  function 


n 

«o(x)  =  E  kxk  (mod  p),  with  0  <  so(x)  <  p  —  1.  (3) 

k=i 


Let  Lnfi  be  the  laced  function  corresponding  to  sq,  namely 


lf(£5o(x)£";  w 

I  x\  otherwise. 

It  is  immediate  that  if  n  p  then  Ln$  is  the  same  as  Ln>+ . 

Throughout  this  paper,  we  use  the  Landau  symbols  O  and  o  with  their 
usual  meanings.  We  denote  by  e*  =  (0, . . . ,  1,  0, . . . ,  0)  the  basis  vector  with 
the  only  nonzero  component  in  position  i,  in  a  vector  space  over  the  binary 
field,  of  dimension  that  will  be  apparent  from  the  context. 


2  The  weight  of  Ln ?+ 

We  recall  that  the  weight,  denoted  by  wt(f),  of  a  Boolean  function  /  is  the 
weight  of  its  truth  table,  namely  the  number  of  l’s  in  that  binary  string. 

It  is  not  very  difficult  to  show  that  LPt 0  (p  prime)  does  not  depend  on  xp. 
In  fact,  the  following  theorem  holds. 
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Theorem  1.  If  p  is  prime,  then 

Lpfi  (*£i  I'--*-?  xp)  —  Lp— 1,+  (xi , . . . ,  Xp—  i ) 
and  so,  wt(LPt o)  =  2u)t(Lp_ii+).  Furthermore,  if  n  ^  2,  then 

wtfLnfl)  =  wt(Lnt+). 

Proof.  When  n  is  prime,  the  function  LU: o  is  degenerate  and  the  first  half 
of  the  truth  table  is  the  same  as  the  second  half.  That  is  because  when  n 
is  prime,  then  k  Xk  (mod  p)  will  always  be  zero  when  k  =  n,  for  either  bit 
value  xk.  The  first  half  of  the  truth  table  will  have  xn  =  0,  and  the  second 
half  will  have  xn  =  1.  The  output  will  be  the  same  in  both  the  cases.  Only  in 
the  case  that  p  —  1  is  also  prime  is  the  Lp_  i  +  function  needed  on  the  right- 
hand  side,  otherwise  Tp-i,o  is  equivalent.  Since  the  weight  of  a  function, 
whose  value  does  not  depend  on  one  of  its  variables,  is  twice  the  weight  of 
the  function  after  removing  this  variable  we  have  u>t(LP) q)  =  2iet(Lp_ii+). 

When  n  =  p  is  prime  then  Ln,: $  and  Tn,+  nray  differ.  In  that  case,  when 
LPi+(x)  =  xp,  then  LP) q(x)  =  x\.  The  argument  for  the  first  part  of  our 
theorem  implies  that  LP) q(x)  is  independent  of  the  value  of  xp.  Moreover, 
note  that  k  =  P^P0  ^  is  divisible  by  p  if  p  is  odd.  Consider  those  values 

of  x  whose  weighted  sums  are  divisible  by  p,  where  LPj+(x)  and  LPt o(x)  may 
differ.  For  each  such  choice  of  the  first  p  —  1  bits,  the  bitwise  complement 
of  those  p—  1  bits  also  gives  a  weighted  sum  divisible  by  p,  and  xp  can  take 
either  value.  So  these  cases  can  be  partitioned  into  groups  of  four,  each  group 
having  two  with  x\  =  1  and  two  with  xp  =  1.  Hence  wt(LPi o)  =  wt(LP}+). 
Finally,  it  is  easy  to  check  that  wt(L2fi)  =  2  /  wt(L2,+)  =  3.  □ 

Suppose  DCZp  =  {0,l,...,p-l}  and  b  G  Zp.  Define  as  in  [3] 

N(k,  b,  D)  =  ff{{x i, . . .  ,xk}  C  D  \  x\  +  x2  H - b  xk  =  b  mod  p}. 

Let  Z*  =  Zp  \  {0}.  From  Theorem  1.2  in  [3]  we  obtain 

N^K)=1p(Pl1)+(-Pvf 

where  v(b )  =  p  —  1  if  6  =  0  and  v(b )  =  —1  if  b  0.  In  this  section  we  use 
the  results  on  the  subset  sum  problem  proved  in  [3]  to  put  the  computation 
of  the  weight  of  Lnfi  in  a  recursive  framework.  First  we  prove  the  following 
lemma. 

Lemma  2.  For  any  a,b  E  Zp  and  a  /  0, 

N (k,  b,  Zp  \  {0,  a})  =  ^  y.  ^  +  (-l)k(wP~k  ~  !)^  ,  (5) 

where  w  =  1  if  b/a  G  {0, . . . ,  k}  and  w  =  0  otherwise. 
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Proof.  From  the  proof  of  Theorem  1.3  of  [3,  p.  920]  we  infer  that 


N(k,  b,  Zp  \  {0,  a}) 


where  Rj  =  (— l)Li/pJ+1  =  _i  (if  j  <  p).  In  the  case  under  consideration 
=  —1  and  b  —  ka+ja  =  0  if  and  only  if  b/a  =  k  —  j  where  j  G  {0, 1, . . .  &}. 
Therefore  we  obtain 

N(k,b,Zp\  {0,a})  =  “  £  2)  +  (-1  )k{wp-k  -  1)^  , 

where  w  =  1  if  b/a  G  {0, . . . ,  k}  and  w  =  0  otherwise.  □ 


Theorem  3.  If  p  >  3  is  a  prime  then 

wt(Lp.lfi)  =  2P~2  +  ^. 

Further,  the  algebraic  degree  of  Lp- go  is  deg(Lp_iio)  =  p  —  1,  if  p  =  3 
(mod  4),  and  deg(Lp_go)  <  p  —  2,  if  p  =  1  (mod  4). 

Proof.  Suppose  x  =  (x^x')  G  Vp_i  \  {0}.  Then  Lp_go(x)  =  1  if  and  only 
if  any  one  of  the  following  conditions  is  satisfied: 


1.  so(x)  =  0  and  xi  =  1;  that  is,  so(0,x')  =  p  —  1,  using  indices  k  G 

ZP\{0,1}. 

2.  so(x)  =  b  >  1  and  Xb  =  1;  that  is,  letting  x  be  x  except  Xb  =  0,  then 
so(x)  =  0,  using  indices  k  £Zp\  {0,  b}. 

The  weight  of  the  function  Tp_i,o  is 


p—  2  p—2  p—  1 

wti^Lp—  i?o)  =  ^  N(k,p  1, Zp  \  -[0, 1})  EE  N(k,0,Zp\{0,b}) 

k= 1  k- 0  6=1 

=  g('i2)+(-l)*+1(*  +  l) 

k= 1 

p—  2  p—  1 

+ee:(("i+h)v^d 


p 

1  //p-2 


(6) 


=  2P 


V 

k= 0  6=1  ^ 

—  2  ,  P  -  1 


The  above  follows  from  Lemma  2,  binomial  coefficients  manipulation,  using 
Jf_ ^  /_/y\  ^ 

the  well  known  (  )  =  2N  and  the  fact  that  £(-i)‘(fc  +  i-0  = 

s=0  '  S  '  1=0 

k  +  2 

2  ' 

We  now  deal  with  the  last  claim.  Assume  p  =  2>  (mod  4).  By  McEliece’s 
Theorem,  the  weight  of  a  Boolean  function  of  degree  d  must  be  divisible  by 
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2l{n  i)/rfj  (see  [4^  p.  447]).  if  the  degree  d  of  Lp-i,o  were  at  most  p  —  2,  then 
its  weight  would  be  divisible  by  2 L(p— 2)/rfJ  with  |_(p  —  2)/dJ  >1.  Since  in  our 
case  p  =  3  (mod  4),  then  2  cannot  divide  (jp—  l)/2,  and  so,  2  cannot  divide 
the  weight  of  Lp_ i.o,  therefore  the  degree  of  Lp_i.o  must  be  p  —  1.  Further, 
assume  p  =  1  (mod  4).  If  deg(Lp_iio)  were  p  —  1,  then  it  is  immediate  that 
the  weight  of  Lp_i,o  must  be  odd,  which  is  not  true  under  the  condition 
p  =  1  (mod  4).  Thus,  deg(Lp_iio)  <  p  —  2.  (We  conjecture  that,  in  fact, 
deg(Lp_i,0)  =  p  -  2,  if  p  =  1  (mod  4).)  □ 

In  [3,  p.  922]  the  following  recursion  was  obtained,  which  will  be  used 
by  us  quite  often. 

Lemma  4.  We  have 

k 

N(k,b,Zp\{ai, . . . ,  ac})  =  y^(-l )lN{k-i,  b-iac ,  Zp\{ai, . . . ,  ac-i}).  (7) 

i= 0 

In  principle,  one  can  compute  the  weight  of  any  of  LSy o  by  using  a  descent 
method,  which  we  shall  display  next.  Let  x  =  (aq,X2,  •  •  •  ,  sn-i)  and  x'  = 
(x2,xs,  ■  ■  •  ,  xn_i).  It  is  easy  to  see  that  if  n  —  1  is  not  prime,  then 


Ln, o(x,  Xn)  =  X„Ln,o(x,  0)  ©  XnLnfl(x,  1).  (8) 

Further,  Ln;o(x,  0)  =  Ln_ i,o(x)  unless  so(x)  =  n  and  x\  =  1,  therefore, 
ivt(Ln^ o(x,  0))  =  wt(Ln_ i,o(x))  —  #{x  :  so(x)  =  n  and  x\  =  1}.  Thus,  if 
one  knows  the  weight  of  LUi o  (for  instance,  since  we  now  know  the  weight  of 
Lp_i) o  by  Theorem  3,  we  can  work  our  way  down),  to  find  the  weight  of  any 
function  po,  we  need  to  find  the  weight  of  the  second  half  of  Ln,o,  that 
is,  1)).  The  problem  does  not  seem  to  be  easy,  in  general,  but  we 

shall  display  an  example. 

Let  n  =  p  —  1.  From  (8)  we  get 

p-  3 

wt(Lr li0)  =  wt(Ln- ij0)  +  wt(LHi 0(-,  1))  -  ^  N(k,p  —  2,Zp  \  {0, 1  ,p  -  1}). 

k= l 


First,  using  equation  (5)  and  the  well  known  binomial  coefficients  identity 

k 

.  /  r  \  ,  /  r  —  I  \ 

(9) 


r  —  1 
k 


D-'f  L  ©(-F 

i=0  v  7 

we  obtain 

k 

N(k,p-2,ZP  \  {0,  l,p-  1})  =  ^(-1  )lN(k  -  i,i-  2,Zp\  {0, 1}) 

i=0 

= e  ^  ( (r !) + <- + j  -  *  -  2>)  <“) 


p  V  k 


i= 0  j=0 
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The  computation  of  the  double  sum  is  straightforward,  since  v(-)  is  —  1 
except  for  one  input,  when  it  is  p  —  1,  but  that  happens  only  if  2  <  i  < 
Ultimately,  one  obtains 

p—']  9 -i-  n2  —  An  —  1 

E  N^p  -  2’zp  \  i°>  i.p  - !})  =  - — ^ — - — , 

fc=i  P 

and  so,  we  get 

2 p  ^  —i—  Tp1  —  —  1 

wt(Ln  0)  =  wt(Ln_i  0)  +  wt(Ln0( •,  1)) - - -  (11) 

4 p 

We  now  concentrate  on  Lr)jo(x,  1),  where  n  =  p  —  1.  By  Theorem  3, 
we  know  that  the  weight  wt(Lp_ yo)  =  2P~2  +  U^1-.  Since  xn  =  1  in  this 
case,  we  see  that  Ln> o(x,  1)  =  1  if  and  only  if  one  of  the  next  (independent) 
conditions  is  satisfied: 

(i)  so(x)  =  0;  and  so,  so(x,  xn)  =  n.  It  follows  that  Ln^ o(x,  1)  =  xn  =  1. 

(ii)  so(x)  =  1  and  x\  =  1;  and  so,  so(x,  xn)  =  0.  Then  Ln;o(x,  1)  =  x\  =  1. 

(Hi)  so(x)  =  b  >  2  and  xb~i  =  1;  and  so,  1  <  so(x,  xn)  =  b  —  1  <  p  —  2. 
Then  Ln,0(x,  1)  =  xb- 1  =  1. 

We  now  count  the  number  of  solutions  x  in  each  of  these  cases.  With  the 
previous  notations,  by  (5)  the  number  of  solutions  in  case  ( i )  is 

n~ l  P~ 2  1  /  /  2\  \ 

£ N(k,o,z„  \  {o.p- 1»  =  £  -  r  7  +  <-i)‘(p  -  *  - 1) 

k= o  k= o  P  \\  y  y  (12) 

_  2P~2  -  1  p  +  1  _  2 P-1  +p-  1 
p  2  p  2  p 

It  follows  from  (7)  that  the  number  of  solutions  in  case  (ii)  is 
p- 3 

5 ^N(k,0,zp\{0,l,p -  1}) 

k= 0 

p— 3  k 

fc=0  i=0 

P— 3  k  1  /  /  o\  \ 

=  £ £(-')*„  (* _ ,)  +  (-i)‘-‘£,(2i +i - 1; 

fc=0  i=0  i  \ v  7  i=o  ) 

_  2 P-3  p2  -  1  _  2P_1  +  p2  -  1 

p  4 p  4 p 
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Similarly,  the  number  of  solutions  in  case  (Hi)  is 


p—  1  p— 3 

EE  N(k,  1,ZP  \  {0, 6  —  l,p  —  1}) 

6=2  fc=l 

p—  1  p— 3  fc 

=  E  E  E(-1)'7V(fc  -  i,  i  +  1,  Zp  \  {0, 6  -  1}) 

6=2  k=l  i=0 

p-lp”3  ;  1  I  /p  —  2 


=  EEE(-1)’ 


6=2  fc=l  i=0 
p— 1  p— 3 


p 


6=2  fc=l  ^ 


1  ^p-3 
k 


(  (fc  -  0  +  (”1)fe_!  ^  V(i  +  1  +  (j  -  k  +  ^  j 

(-!)*„. 2  ,  _  2P_1  (p  —  2)  —  2p  +  2 


-(r  +3/c  +  2)  = 


4p 


Adding  these  three  counts  and  using  (11),  we  obtain 

2p_2  p-1  2P-1+p-l  2P_1  +  p2  —  1  2P_1 (p  —  2)  —  2p  +  2 

2  2p  4 p  4p 

tp2-4p  +  2 p-1  -  1  _  0p_3  P-3 

+  4p  +  2  ’ 

which  proves  the  next  theorem. 


Theorem  5.  Assuming  that  p  >  3  is  prime  and  p  —  2  composite,  then  the 
weight  of  Lp_2,o  is 

wt(Lp.2fi)  =  ‘2P-3  +  1^. 

For  easy  writing,  if  p  is  fixed,  let  Aft)  :=  Y?k=o(~ l)fe(fc+p“1_t). 
general,  along  the  same  path  as  before  (without  attempting  to  have  accurate 
bounds)  one  can  prove  the  next  result. 


Theorem  6.  Let  n  >  2  be  an  integer,  p  the  least  prime  >  n  and  D  = 
Zp  \  {0,  n  +  1, . . .  ,p  —  1}.  The  weights  wn  =  wt(Lnp),  n  <  p  —  2,  satisfy  the 
recurrence 

n— 1  n— 2 

wn-wn-\  =  y>(fc,0,B\{n|)  +  y>(fc,0,D\{l,n}) 

k= 0  k—0 


< 


n  n— 2  n— 2 

+EE  N(k,  1,B  \  {6  —  1,  n})  —  ^  N(k,  n—  1,B  \  {1,  n}) 

6=2  fc=l  fc=l 


1 

P 


^(n  +  l)2n_2 


n  —  1 

H - 

V 


-1-4  (^(n  -  !)  +  (p  -  l)A(n  -  2)) . 

pZ 


Proof.  We  will  motivate  only  the  inequality  claim,  as  the  recurrence  can  be 
shown  by  an  argument  similar  to  the  one  of  Theorem  5.  We  use  Theorem 
1.1  of  [3]  together  with  equation  (8),  to  find  upper  bounds  for  each  count. 
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First, 


n—  1  n—1  /n— 1\  _  (  —  1)fc  !k+p—n\  .  tk+p—n— 1\ 

0,B\{n})  <  Y,— - P  P~H  -  P~^1 


=  ifV-'  +  p-lT-i 


=  -  2 71-1  + 
P  \ 


7  7  ^  /c— 0 


k  +  p  —  n 


n—l  n— 2  fn~2)  _  (  — l)fc  /fc+p— w+l\  ,  /'fc+p— n\ 

£iV(fc,0,B\{l,n})  <  ^  — p  1  p~n+1  ’ - 1  p~n  ’ 

k= 0  k= 0 


-  2"-2  + 


-  2"-2 + 


k  +  p  —  n  +  1 
p  —  n  +  1 


Third, 


n  n— 2  n— 2  (n~2\  _  (~1)*  /fc+p— n+l\  ,  tk+p—n\ 

1,D\{6  — l,n})  <  - ?  1  p~"+1  1 - 1  ’ 

6=2  fe=l  fc=l  ” 


Finally, 


2n-2  + 


2n-2  + 


\  1  n~ 2 
7  F  k= 1 


- i)  -  V1 1-4!"  -  2)  - 1)  ■ 


k  +  p  —  n  +  1 
p  —  n  +  1 


N(k,  n—  1,B  \  {1,  n}) 


lfn  —  2\  (— l)fc  fk  +p  —  n  +  1\  fk  +  p  —  n 


p\  k 


p  \  p  —  n  +  1 


N/t  A + p  -  «  + 1 
\  P  -  n  +  1 


Putting  all  these  bounds  together,  we  obtain  that  wn  —  wn- 1  is 

<  i((„+i)2»-+„P-b  +  P-b+-^+2 

p  \  \n  —  2/  \n  —  1J  p 


-  1  -  —  (A(n  -  1 )  +  (p  -  l)^(n  -  2)) . 


One  can  use  a  computer  algebra  system  to  replace  A(t)  by  a  hypergeo- 
rnetric  expression,  but  we  preferred  not  to  do  that,  since  it  is  simple  enough 
(as  one  reviewer  suggested) .  Taking  n  =  p  —  2  in  the  previous  theorem  and 
using  the  result  of  Theorem  5,  we  obtain  the  following  corollary. 


Corollary  7.  We  have  for  prime  p  >  3  where  p  —  2  is  composite 


p-  1  2p_  4  4p5-34p4  +  117p3-215p2  +  227p-3 

p  24p 

3  A  generalization 

We  introduce  a  generalized  version  of  the  xi-laced  Boolean  function,  say 
(f -laced  function,  where  0  is  an  arbitrary,  but  fixed  Boolean  function  on  Yn, 
which  we  define  by 


Wt(Lp-3fl)  > 


xs(x)  if  1  <  s(x)  <  n; 
<j>(x)  otherwise, 


where  s  is  either  so,  or  s+.  It  could  be  interesting  to  investigate  the  proper¬ 
ties  of  this  generalized  laced  function,  similar  to  the  ones  contained  in  [8],  or 
in  this  paper.  Below  we  consider  one  such  function  obtained  by  modifying 
the  xi-laced  Boolean  function,  and  compute  its  weight  for  any  value  of  n. 


3.1  A  modification  of  the  x\— laced  Boolean  function 

Let  the  Boolean  function  Ln  be  defined  as  follows. 


zs+(x)  if  s+(x)  G  [l,ra]; 
3L+(x)-n  if  s+(x)  €  [n  +  1  ,p\. 


(13) 


(Note  that  when  n  =  p  oi  n  =  p  —  1,  this  Ln  is  the  same  as  Ln  +,  which  was 
studied  earlier.)  Recall  the  definition  of  Gauss’  hypergeometric  function  [1, 

P-1] 


■2Fi(a,b-,c;z)  =  ^ 

k= 0 


Q a)k(b)kzk 

(c)fcfe! 


where  [x)k  =  x(x  +  1)  •  •  •  (x  +  k  —  1)  is  the  Pochhammer  symbol.  We  will 
be  using  the  hypergeometric  function  to  write  in  a  compact  way  an 
alternating  sum  of  binomial  coefficients.  In  the  following  theorem  we  obtain 
the  weight  of  the  function  Ln,  for  every  value  of  n.  Let  W}}y.  =  1,  if  (the 
least  residue  of)  n(b  —  n)_1  (mod  p)  is  i  <  k,  otherwise,  Wbk  =  0.  Define 

^:=ELn+1E^i(-i)fc^- 


Theorem  8.  If  n  >  2  is  a  positive  integer  and  p  is  the  smallest  prime 
number  greater  than  or  equal  to  n  with  p  /  n  then  the  weight  of  the  function 
Ln  is 


wt(Ln)  —  2P  2  - f  ^  2 Tl  ( 1  ?  n  —  p  +  2,  n  1,  —1)  +  en 

V  \  n  J 

(2(-l )nn  +  (1  -  (-l)n)  (2 p  -  1))  +  (3  +  (2n  +  l)(-l)n)  (p  -  n) 
+  4 p 
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Proof.  Suppose  s+(x)  =  b.  Ln(x)  =  1  in  the  following  two  cases. 

Case  1:  b  e  [l,n],  Xb  =  1.  In  this  case  Ylk= i^xk  =  b  mod  p,  that  is 
k^b  ^xk  =  0  mod  p.  The  number  of  such  points  is  equal  to 


n  n—  1 

^^iV(fc,0,Z\{0  ,&}). 

6=1  k= 0 

Case  2:  b  e  [n  +  1  ,p],  xi =  1.  In  this  case  J2k=i,k^=n-b^xk  +  b  -  n  = 
b  mod  p.  that  is  Y^k=  l  k^n-b  ^xk  =  ^  mod  p.  The  number  of  such  points  is 
equal  to 

p  n- 1 

b=n-\-l  h= 1 

Thus  the  total  number  of  points  at  which  the  function  Ln  is  equal  to  1  is 
n  Ti—l  p  n—1 

wt(Ln)  =  EE  iv(M,z\{o,&})  +  E  E  iV(fe,  n,  Z  \  {0,  b  —  n}). 

6=1  /c=0  6=n+l  k=l 


Recall  that  N(k,  b,  Zp\ {0,  a})  =  |  ((pfc2)  -  (-l)fc^=0u(6-  fca +  ja)-R}) , 

where  v(b)  =  p  —  1  if  5  =  0  and  u(6)  =  —1  if  6  7^  0.  /?,j  =  (— l)^pJ+1  =  —1  if 
j  <  p.  Thus 


N(k,0,Zp\{0,b}) 


(14) 


since  b  <  p  and  so  v(b{j  —  k))  =  v(j  —  k).  Further, 


N(k,n,Zp\{0,b-  n})  =  ^  fc  ^  +(-l)fe^]u(n-  (■ b-n)(k-j )) 

=  p((Pz2)  +  (-,>t'£”("-<l’-">i>)  (15) 

=  p  ((^  fc  ")  +  ^  k-  1)^  , 


where  Wb,k  =  1,  if  (the  least  residue  of)  n(b  —  n)  1  (mod  p)  is  i  <  k  (and 
so,  v(n  —  (b  —  n)i )  =  p  —  1,  in  that  case),  otherwise,  Wb.k  =  0.  Now,  we  use 
(14)  and  (15),  together  with  Mathematica1 ,  to  compute  the  weight  of  the 

1 A  Trademark  of  Wolfram  Research 
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function  Ln  as 


p  n—  1 


wt{Ln)  =  EE  N(k,  0,  Z  \  {0,  b})  +  E  E  N(k,  n,  Z  \  {0,  b  —  n}) 


6=1  fc= o 

1  n  n— 1 

-  ££ 

K  6=1  fc=0 

p  n—1 

+  EE 

6=n+l  /c=l 
1  p  n-1 


P-2 
fc 


6— n+1  /c— 1 
\k/ 


+  (-l)\p-k~l) 

+  (-1  )k(pwbtk  -k  -  1) 


P 


1 


P-2 
fc 


p  —  2\  n  —  p  1 


6=1  fc=0 
p  n—1 


n  n—1 


p  p 


6=1  fc=0 


+  EE  (~l)k(pwbik  -k-  1) 


P 
=  2P 


6— n+1  /c— 1 

-2  ,  n~P  fP~2 


P 


n 


2-^1  (I?  ^  —  p  +  2,  71  +  1,  — 1)  +  < 


+  i  (2(— l)nn  +  (1  -  (-1)-)  (2 p  -  1))  +  1  (3  +  (2 n  +  !)(-!)")  (p  -  n). 


(Observe  that  the  hypergeometric  function  2 -Pi  (a,b]c;z)  is  convergent  for 
a  =  1,  b  =  n—p+ 2,  n+1,  z  =  —  1,  since  Re(c—a—b)  =  (n+1)  — 1  — (n— p+2)  = 
p  —  2  >  0,  cf.  [1,  P.l].)  □ 


4  The  average  sensitivity  of  some  laced  functions 

In  [2],  Cook  et  al.  introduced  the  notion  of  sensitivity  as  a  combinato¬ 
rial  complexity  measure  for  Boolean  functions  providing  lower  bounds  on 
the  time  needed  by  a  CREW  PRAM  (concurrent  read,  but  exclusive  write 
(CREW)  parallel  random  access  machine  (PRAM)).  It  was  extended  by 
Nisan  [5]  to  block  sensitivity.  It  is  still  open  whether  sensitivity  and  block 
sensitivity  are  polynomially  related  (they  are  equal  for  monotone  Boolean 
functions).  Here,  we  will  define  and  work  with  the  notion  of  sensitivity, 
only.  Although  the  definition  is  straightforward,  the  sensitivity  is  under¬ 
stood  only  for  a  few  classes  of  function.  In  this  section  we  add  one  more 
class  (Theorem  10)  of  Boolean  functions  for  which  the  sensitivity  is  known. 

Let  p  =  1  —  ^^9  SfcLo  E+i)2  ~  0-1587. . .,  and  let  H  be  the  entropy 
function  H(x)  =  — xlogx  —  (1  —  x)log(l  —  x),  0  <  x  <  1.  We  define  the 
average  sensitivity  of  a  Boolean  function  g  on  n  variables  by 

n 

crav(g)  =  2_n  E  E  l#(x)  -  s(x  ©  ei)\,  (16) 

xev„  i— 1 

where  ej  =  (0, . . . ,  0, 1,  0, . . .)  (with  1  on  the  zth  position).  Shparlinski 
showed  in  [8]  that  aav{f )  >  (r  +  o(l))n,  where  r  =  0.0575 ...  is  the  root  of 
the  equation  H (r)  =  2 p,  and  he  asked  the  following  question. 
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Open  Question  9  ([8,  p.  86]).  Is  it  true  that  the  function  Ln,+  satisfies 

C Tav(Ln,+)  >  Q  +o(l)^  n? 

Below,  we  give  further  evidence  to  this  open  question  (recall  that  for 
n  prime,  Ln  =  LU)+,  and  so,  we  get  the  same  result  for  Ln  for  free).  We 
would  like  to  point  out  that  the  error  term  in  our  computation  is  explicit 
and  always  negative,  for  prime  p  sufficiently  large  (more  precisely,  p  >  11). 

Theorem  10.  We  have  for  odd  prime  p 

_  (p2-p  +  2)2p^'2  +  (p-l)3  +  (p2-p)(-l)E2~ 

Vav\^p,+)  -  P2P-1 


Consequently,  <Jav(LPj+)  <  f,  for  sufficiently  large  prime  p. 

Proof.  To  find  aav(LPt+)  we  count  the  ways  that  changing  a  single  bit  in  x 
to  get  x  results  in  a  change  in  the  function  from  LPi+(x)  =  1  to  LPi+(x)  =  0; 
this  total  gives  2P_1  <jav(LPt+).  (The  power  is  2 p_1,  not  2P,  because  we  only 
count  the  changes  of  LP:+  from  1  to  0  and  not  the  reverse  cases  from  0  to  1.) 

Let  a  =  s+(x),  b  be  the  index  of  the  bit  Xb  we  flip  to  £&,  and  c  =  s+(x). 
Then  the  output  of  Lp,+  will  change  from  xa  =  1  to  xc  =  0  in  the  five 
distinct  cases  below.  In  the  last  case,  Xb  =  0  changes  to  Xb  =  1.  For  the  first 
four  cases,  =  1  changes  to  Xb  =  0,  so  c  =  a  —  b  (mod  p),  and  we  exhaust 
all  cases  of  equality  between  a,  b,  and  c;  note  that  we  cannot  have  a  =  c  fi  b 
because  then  xc  =  xa  =  1. 

(i)  a  =  b  =  c  =  p  (since  c  =  a  —  b  (mod  p ))  so  xc  =  Xb  =  0. 

(■ ii )  Xb  =  1  and  a  fib  =  c  (i.e.  a  =  2b  (mod  p)  but  b  f  p),  so  a  p  and 
xc  =  Xb  =  0. 

(in)  a  =  b  f  c  =  p  (since  c  =  a  —  b  (mod  p))  and  xp  =  0,  so  xc  =  xp  =  0. 

(■ iv )  Xb  =  1  and  xc  =  0  and  a,  b ,  and  c  are  distinct  (where  c  =  a  —  b 

(mod  p)),  so  a  2b  (mod  p)  (since  b  f  c)  and  b  f  p  (since  a/c)  and 
cfip  (since  a  fib),  then  xc  =  xc  =  0. 

(v)  Xb  =  0  and  xc  =  0,  where  c  =  a  +  b  (mod  p),  so  a  fib  (since  xa  =  1  fi 
Xb  =  0),  b  fi  c  and  a  fi  p  (since  Xb  =  1  fi  xc  =  0),  a  fi  c  and  b  fi  p 

(since  xa  =  1  fi  xc  =  0),  so  again  a,  b,  and  c  are  distinct. 

We  now  count  the  number  of  solutions  a,  b,  c  in  each  of  these  cases.  We  will 
extensively  use  Lemma  4  along  with  equation  (9)  and  the  definition  of  the 
function  v(-). 
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With  the  previous  notations,  the  number  of  solutions  in  case  ( i )  is 


p- 1 

Si  =  £  N(k,  0,  Zp  \  {0}) 


fc=0 


+  (-!)*(?- 1)) 


2P-1  +p-l 
V 


(17) 


For  case  ( ii ),  the  number  of  solutions  for  the  choice  6  =  1  (so  a  =  2)  is 


p— 3  p- 3  k 

S2  =  Y,  N(k,  -1,  Zp  \  {1,  2})  =  2  £(-l)0v(fc  -  -2i  -  !.  \  {!}) 

fc=l  /c=l  2=0 

p"3  (-i)V^-A  ,  ,  ^ 


p 


k  —  i 


EE 

fc=l  i= 0 

2P-2  _  1  (_l)(P-l)/2  +  1  _  2P_1  -  1  (-1) 

p  2p  2p  2 


P-1 

2 


Then,  since  6  could  take  any  value  in  Z*  (with  a  changing  accordingly  from 
2  above  to  26  (mod  p)),  the  total  for  case  (ii)  is  (p  —  l)x  this  sum. 

The  number  of  solutions  in  case  (in),  for  the  choice  6  =  1,  is  (as  in  (6)) 


Ss  =  E  0.  Zp  \  {0, 1})  =  E  -  (  (P  ,  2)  +  (-l)fc(P  -  k  -  1) 

k=o  k= opVV  k  ' 

_  2P_1  +  p  -  1 
2  p 

Again,  6  could  take  any  value  in  Z*,  so  the  total  for  case  (m)  is  (p  —  l)x 
this  sum. 

For  case  ( iv ),  with  the  choice  6  =  p  —  1  (so  c  =  a  —  6  =  a  +  1  and 
a  26  =  p  —  2),  by  Lemma  4,  the  number  of  solutions  is 

p— 3  p— 3 

s4  =  E£  A(fc,  l,Zp  \  {a,  a+  l,p-  1}) 

a— 0  k—1 
p—3p—3  k 

=  £  £  £(-l)W(fc  -  i,  t  +  1,  Z„  \  {a,  a  +  1}) 

a— 0  /c— 1  2—0 
p—3p—3  k  k—i 

=  E  E  E  £(-l)’+JN(fc  -  *  -  j,i  +  1  -  j(a  +  l),Zp  \  {a}) 

a— 0  /c— 1  2—0  j=0 
p—3p—3  k  k—i 

=  ££££(-l)*+JN(fc  -  *  -iA  +  1  -j(a  +  1)  -  (6  -  i-j)a, Z*) 

a— 0  /c— 1  2—0  j=0 

p-3p-3  k  k-i  ( (  p-1  .)  +  (-l)fc-*-^(j  +  1  -  j  +  (i  -  k)aj) 

=  EEEE(-d<+a  J  — „ -  J 

a— 0  fc— 1  2—0  j— 0 

_  (2P-3-l)(p-2)  p-3  _  2P"3(p-2)  p-1 

p  2p  p  2p 
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using  the  fact  that,  for  a  /  0,  N(k,b,'Zp  \  {a})  =  N(k,b  —  ka,7jp  \  {0}). 
Again,  the  total  is  (p  —  1)  x  this  sum,  since  any  given  choice  of  (a,  a  +  1,  —  1) 
above  can  be  multiplied  by  any  b  £  Z*. 

Lastly,  for  case  (u),  again  with  the  choice  b  =  p  —  1  (so  c  =  a  +  b  =  a—  1 
and  a  /  b,p),  the  number  of  solutions  is 


p— 3 p— 3 

*  =  ££  N(k,  0,ZP  \  {c,c+  l,p-  1}) 

c=0  /c— 1 

=  £  £  £  £(-i )i+jN(k  j(c + 1),  zp  \  {c}) 

c=0  /c— 1  i=0  j— 0 
p — 3  p — 3  k  k _ % 

=  £  £  £  £(-!)i+:'Ar(fc  j(c  +  1)  -  {k  -  i  -  j)c,Z* ) 

c— 0  k— 1  i—0  j— 0 
p—3p—3  k  k—i 


=  ££££(-1)j+^ua,_^, 
c— 0  fc=l  i=0  3=  0  P  V  V  J 

2P~3(p-2)  n  1  (-1)* 

=  - - - ^+P-2+-  +  ^- 

p  2p  2 


P-1 


+  (-i) 


{i  ~  j  +  {i  —  k)c ) 


And  again,  the  total  is  (p  —  l)x  this  sum. 

Adding  the  counts  for  cases  ( ii)-(y )  (each  for  a  single  choice  of  b)  then 
gives 

S2  +  S3  +  S4  +  S5  =  2P~ 2  +p  -  2  +  (-l)2^ 

So  we  conclude  that 


@av(J-Jp,+  )  — 


Si  +  (p  -  1)  X  [S2  +  53  +  54  +  5s] 


2P-1 
o-2 


p-1 


-1 


(p2  —  p  +  2)2p  2  +  (p  —  l)3  +  (p-  —  p){— 1)  2 
~p2P 

l(  i-‘+4i+o 

p  p- 


p 


2  p-1 


p. 


Therefore,  aav(Lp^+) /p  <  \  for  p  sufficiently  large.  □ 

We  wrote  a  computer  program  to  directly  calculate  the  sensitivity  per  bit 
aav{Ln,+)/n  for  values  2  <  n  <  32,  and  similarly  for  Ln< o  and  Ln.  Figure  1 
shows  our  findings  (values  at  integers  n  are  connected  by  lines  for  visual 
clarity);  these  results  are  also  listed  in  the  Appendix.  Note:  for  n  /  p,  then 
Ln, o  =  LHt+;  for  n  =  p  or  n  =  p  -  1,  then  Ln  =  Ln,+  . 

The  analysis  for  the  sensitivity  of  Ln+  may  be  done  for  other  values  of 
n,  as  the  reader  can  suspect,  however,  the  general  case  does  not  seem  too 
simple  since  the  bounds  for  the  N  counts  used  in  our  analysis  are  not  strong 
enough  to  give  the  tight  bounds  for  the  sensitivity. 

Certainly,  other  cryptographic  properties  can  be  investigated.  We  wrote 
a  program  which  computes  the  (Hamming)  nonlinearity  (that  is,  the  mini¬ 
mum  Hamming  distance  to  the  set  of  all  affine  functions  [9])  of  the  .Ti-laced 
functions  and  we  report  here  some  preliminary  observations.  We  found  that 
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Figure  1:  Sensitivity  per  bit  of  Ln,+  (solid),  Ln< o  (dotted),  Ln  (dashed),  for 
n  <  32 


for  n  >  10,  x'i  seems  to  be  the  closest  function  whose  corresponding  dis¬ 
tance  gives  the  nonlinearity  (this  is  natural  as  in  many  cases  we  force  Ln  to 
equal  x\).  If  that  were  to  be  proved,  then  the  nonlinearity  can  certainly  be 
computed  since  we  know  that  the  truth  table  of  the  function  x\  is  simply 
the  concatenation  of  the  pattern  01,  2n~1  number  of  times.  That  can  be 
accomplished  by  a  method  not  too  different  than  the  one  contained  in  this 
paper.  Moreover,  we  observed  that  the  nonlinearity  seems  to  increase  as  the 
distance  between  n  and  the  next  prime  increases. 
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Appendix 


Table  1:  Sensitivity  of  the  Laced  Boolean  Functions. 

Note:  for  n  /  p,  then  Ln> o  =  L„j+;  for  n  =  p  or  n  =  p  —  1,  then  Ln  =  . 


Laced  Function 

n 

P 

Ln,  0 

Ln,-\- 

Ln 

i 

2 

=> 

1.000000 

2 

2 

0.500000 

0.500000 

3 

3 

0.333333 

0.500000 

4= 

4 

5 

=> 

0.750000 

<*= 

5 

5 

0.600000 

0.650000 

4= 

6 

7 

=> 

0.562500 

4= 

7 

7 

0.482143 

0.504464 

<= 

8 

11 

=> 

0.542969 

0.515625 

9 

11 

=> 

0.537326 

0.507378 

10 

11 

=> 

0.507812 

<*= 

11 

11 

0.461648 

0.469993 

4= 

12 

13 

=> 

0.502930 

13 

13 

0.464243 

0.470177 

4= 

14 

17 

=> 

0.499721 

0.492868 

15 

17 

0.501274 

0.496570 

16 

17 

=> 

0.500244 

17 

17 

0.470818 

0.474279 

4= 

18 

19 

=> 

0.500061 

4= 

19 

19 

0.473742 

0.476512 

4= 

20 

23 

=> 

0.498964 

0.495687 

21 

23 

==> 

0.500033 

0.497941 

22 

23 

=> 

0.500005 

4= 

23 

23 

0.478265 

0.480156 

<*= 

24 

29 

0.495695 

0.494256 

25 

29 

=> 

0.497934 

0.495863 

26 

29 

=> 

0.499338 

0.497348 

27 

29 

=> 

0.500001 

0.498723 

28 

29 

=> 

0.500000 

<= 

29 

29 

0.482759 

0.483948 

4= 

30 

31 

=> 

0.500000 

<*= 

31 

31 

0.483871 

0.484912 

32 

37 

=> 

0.497466 

0.496622 

17 


